Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7019d1c7-b32a-4a65-a135-234cde3c7680/519f03c0-2ac3-3788-84dc-64cd7bfb18ab.roa
File:                     519f03c0-2ac3-3788-84dc-64cd7bfb18ab.roa (raw, json)
Hash identifier:          NWR0GeX9Obp0GpVudO2+3YH+75WI+uCGDfW0dKy7RUQ=
Subject key identifier:   61:EB:BD:9D:85:E2:D8:C5:D2:1C:F0:E2:ED:EC:DB:E3:3B:DD:71:D5
Certificate issuer:       /CN=7019d1c7-b32a-4a65-a135-234cde3c7680
Certificate serial:       010D0C9F4328584E3E5F51D01BEEDEF203B6A580
Authority key identifier: 22:0D:F1:6D:99:E3:03:0F:29:82:88:A7:43:95:89:6B:00:CC:4D:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7019d1c7-b32a-4a65-a135-234cde3c7680.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7019d1c7-b32a-4a65-a135-234cde3c7680/519f03c0-2ac3-3788-84dc-64cd7bfb18ab.roa
Signing time:             Sun 21 Jun 2026 09:00:12 +0000
ROA not before:           Sun 21 Jun 2026 09:00:12 +0000
ROA not after:            Sat 19 Sep 2026 09:00:12 +0000
asID:                     18656
IP address blocks:        104.193.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7019d1c7-b32a-4a65-a135-234cde3c7680/7019d1c7-b32a-4a65-a135-234cde3c7680.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7019d1c7-b32a-4a65-a135-234cde3c7680/7019d1c7-b32a-4a65-a135-234cde3c7680.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7019d1c7-b32a-4a65-a135-234cde3c7680.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:5f:51:d0:1b:ee:de:f2:03:b6:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7019d1c7-b32a-4a65-a135-234cde3c7680
        Validity
            Not Before: Jun 21 09:00:12 2026 GMT
            Not After : Sep 19 09:00:12 2026 GMT
        Subject: CN=024c7784-d979-4c7d-a405-59a36cb95f40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c9:9d:fb:5f:4c:99:1f:32:54:8f:b8:c1:45:
                    c3:7e:d1:81:39:64:03:9d:47:04:aa:fb:eb:7b:56:
                    30:70:00:f8:3d:10:aa:13:37:12:54:3a:94:b5:2e:
                    60:52:4d:14:15:64:63:11:95:76:ad:dc:fb:66:6d:
                    2c:be:c9:5d:4e:35:e8:23:d5:6f:11:66:5f:3e:92:
                    3f:3f:b5:56:3c:50:78:56:ef:2d:60:ff:9d:91:28:
                    69:62:9a:4b:78:2f:30:22:0a:2e:55:a1:73:9c:8f:
                    03:d4:dd:57:c3:53:81:b8:2f:e7:cb:2c:90:e1:35:
                    ec:77:9a:bb:55:e0:e9:57:cb:87:a0:9e:ec:d9:b0:
                    24:26:43:12:f1:f8:3c:99:b8:0d:b0:a9:6d:d6:2b:
                    23:bd:01:5c:ce:d4:61:c6:39:42:e5:eb:90:88:3b:
                    20:1f:26:19:03:67:ca:2d:be:17:ee:98:8f:3d:5a:
                    71:c0:03:8b:fc:dd:00:1e:7b:7b:11:1a:b1:be:61:
                    c6:c7:48:ec:16:f3:27:a5:9d:bd:7a:b3:21:12:7a:
                    f0:76:a8:00:2e:4d:39:ff:fb:06:6a:fb:d3:91:d1:
                    72:3c:43:bb:f2:79:0b:21:44:48:5e:47:c6:5a:c7:
                    ba:09:25:7c:fc:d5:af:0f:14:22:f2:37:c5:d3:28:
                    bf:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:EB:BD:9D:85:E2:D8:C5:D2:1C:F0:E2:ED:EC:DB:E3:3B:DD:71:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7019d1c7-b32a-4a65-a135-234cde3c7680/519f03c0-2ac3-3788-84dc-64cd7bfb18ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7019d1c7-b32a-4a65-a135-234cde3c7680/7019d1c7-b32a-4a65-a135-234cde3c7680.crl

            X509v3 Authority Key Identifier:
                keyid:22:0D:F1:6D:99:E3:03:0F:29:82:88:A7:43:95:89:6B:00:CC:4D:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7019d1c7-b32a-4a65-a135-234cde3c7680.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.193.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:95:57:a1:98:56:c5:fd:6a:04:ec:14:45:e1:63:99:9f:c0:
         d3:db:fd:e4:68:5c:fa:71:6f:bb:42:34:47:61:c5:5d:83:8f:
         9b:41:21:05:11:32:1b:9c:c9:9c:b8:1b:c9:e5:f1:1c:8b:61:
         5d:77:2a:97:08:4b:92:57:c1:4c:bb:a3:a3:d5:65:c7:dd:9f:
         c9:03:b7:be:62:6f:19:15:02:be:e6:e2:fe:71:c1:61:6b:98:
         a7:03:6b:89:42:39:c3:99:88:1c:b0:2e:36:47:2c:23:74:d0:
         08:16:e9:d4:9e:54:93:02:92:75:d8:70:9c:01:ab:6e:4c:87:
         e9:5b:30:50:35:0c:a5:1e:cc:67:81:9b:a3:6f:54:a8:48:67:
         b8:40:d5:fb:5d:e0:e8:be:f2:8a:99:85:f7:ee:1b:8f:8f:95:
         dc:d3:c4:e1:0c:60:f4:fe:37:20:d3:ac:37:0d:5c:18:ef:70:
         fc:71:40:a0:ec:dc:03:1e:ef:f9:11:22:03:15:00:f4:08:00:
         c5:51:7e:e9:61:4a:ba:76:d5:f3:9a:0c:b3:d8:86:91:21:ed:
         44:6f:a8:d2:e5:f6:97:51:6b:f9:d3:7a:cf:66:e0:94:c7:e5:
         03:db:b3:02:08:29:da:07:1e:e2:5e:de:9c:37:dd:9c:e0:b5:
         e6:81:fe:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 01:44:47 2026 by rpki-client